diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..d5467c559 --- /dev/null +++ b/.snyk @@ -0,0 +1,5 @@ +ignore: + "com.github.spotbugs:spotbugs-maven-plugin": + - "*": + reason: "SpotBugs is a build-time plugin and does not impact runtime security." + expires: "2025-12-31" diff --git a/Dockerfile b/Dockerfile index eb678d5eb..53a4ba70b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,10 +3,14 @@ FROM eclipse-temurin:17 AS builder ARG MAVEN_VERSION=3.9.6 ARG USER_HOME_DIR="/root" ARG SHA=706f01b20dec0305a822ab614d51f32b07ee11d0218175e55450242e49d2156386483b506b3a4e8a03ac8611bae96395fd5eec15f50d3013d5deed6d1ee18224 -ARG BASE_URL=https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries/ +ARG BASE_URL=https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries RUN mkdir -p /usr/share/maven /usr/share/maven/ref \ - && curl -fsSL -o /tmp/apache-maven.tar.gz ${BASE_URL}/apache-maven-${MAVEN_VERSION}-bin.tar.gz \ + && for i in 1 2 3; do \ + echo "Attempt $i to download Maven..." && \ + curl -fsSL --connect-timeout 300 --max-time 600 -o /tmp/apache-maven.tar.gz ${BASE_URL}/apache-maven-${MAVEN_VERSION}-bin.tar.gz && break || \ + (echo "Download failed, attempt $i of 3" && sleep 10); \ + done \ && echo "${SHA} /tmp/apache-maven.tar.gz" | sha512sum -c - \ && tar -xzf /tmp/apache-maven.tar.gz -C /usr/share/maven --strip-components=1 \ && rm -f /tmp/apache-maven.tar.gz \ diff --git a/acceptance-tests/pom.xml b/acceptance-tests/pom.xml index 040b732e7..dcab2762f 100644 --- a/acceptance-tests/pom.xml +++ b/acceptance-tests/pom.xml @@ -3,7 +3,7 @@ 4.0.0 acceptance-tests gov.cms.qpp.conversion - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE conversion-tests jar diff --git a/commandline/pom.xml b/commandline/pom.xml index 15223bd1e..6ea60f8db 100644 --- a/commandline/pom.xml +++ b/commandline/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml diff --git a/commons/pom.xml b/commons/pom.xml index fd511e2bc..b356eb476 100644 --- a/commons/pom.xml +++ b/commons/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml diff --git a/commons/src/main/resources/measures-data.json b/commons/src/main/resources/measures-data.json index 156bd7e37..a8a8062ee 100644 --- a/commons/src/main/resources/measures-data.json +++ b/commons/src/main/resources/measures-data.json @@ -18257,7 +18257,7 @@ "measureType": "process", "isHighPriority": true, "primarySteward": "AAOS Orthopaedic Quality Resource Center", - "isInverse": true, + "isInverse": false, "isRiskAdjusted": false, "isIcdImpacted": false, "icdImpacted": [], diff --git a/converter/pom.xml b/converter/pom.xml index f07e6d615..5458fd6f3 100644 --- a/converter/pom.xml +++ b/converter/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml @@ -170,7 +170,7 @@ gov.cms.qpp.conversion commons - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE compile diff --git a/generate-race-cpcplus/pom.xml b/generate-race-cpcplus/pom.xml index db3824319..8597c56ba 100644 --- a/generate-race-cpcplus/pom.xml +++ b/generate-race-cpcplus/pom.xml @@ -5,7 +5,7 @@ qpp-conversion-tool-parent gov.cms.qpp.conversion - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../ 4.0.0 diff --git a/generate/pom.xml b/generate/pom.xml index 8adae6155..2ac6c44dc 100644 --- a/generate/pom.xml +++ b/generate/pom.xml @@ -5,7 +5,7 @@ qpp-conversion-tool-parent gov.cms.qpp.conversion - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml 4.0.0 diff --git a/pom.xml b/pom.xml index 36e5acfad..535ce9588 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent pom - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE QPP Conversion Tool @@ -501,7 +501,7 @@ net.logstash.logback logstash-logback-encoder - 6.4 + 8.1 diff --git a/qrda3-update-measures/pom.xml b/qrda3-update-measures/pom.xml index 4edbfd33a..b340177b9 100644 --- a/qrda3-update-measures/pom.xml +++ b/qrda3-update-measures/pom.xml @@ -3,7 +3,7 @@ qpp-conversion-tool-parent gov.cms.qpp.conversion - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../ diff --git a/rest-api/pom.xml b/rest-api/pom.xml index 534f4b59e..8a14ca732 100644 --- a/rest-api/pom.xml +++ b/rest-api/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml @@ -30,7 +30,7 @@ org.springframework.boot spring-boot-maven-plugin - 3.4.7 + 3.4.8 @@ -63,7 +63,7 @@ org.springframework.boot spring-boot-dependencies - 3.4.7 + 3.4.8 pom import @@ -127,12 +127,12 @@ org.springframework.boot spring-boot-starter-security - 3.4.7 + 3.4.8 org.springframework.boot spring-boot-starter-web - 3.4.7 + 3.4.8 org.springframework @@ -317,7 +317,7 @@ org.springframework.boot spring-boot-starter-test - 3.4.7 + 3.4.8 test diff --git a/test-commons/pom.xml b/test-commons/pom.xml index 511087c14..a385950df 100644 --- a/test-commons/pom.xml +++ b/test-commons/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml diff --git a/test-coverage/pom.xml b/test-coverage/pom.xml index d74150f83..d2ed13f95 100644 --- a/test-coverage/pom.xml +++ b/test-coverage/pom.xml @@ -6,7 +6,7 @@ gov.cms.qpp.conversion qpp-conversion-tool-parent - 2025.07.31.01-RELEASE + 2025.08.13.01-RELEASE ../pom.xml